diff options
| author | Kuan-Ting Chen <[email protected]> | 2023-05-19 23:00:24 +0900 |
|---|---|---|
| committer | Steve French <[email protected]> | 2023-05-26 20:27:46 -0500 |
| commit | 0512a5f89e1fae74251fde6893ff634f1c96c6fb (patch) | |
| tree | fdf81b0b3f914d38a1ac67f6d1be36038e4cb8b4 /lib/mpi/mpi-mod.c | |
| parent | d738950f112c8f40f0515fe967db998e8235a175 (diff) | |
ksmbd: fix multiple out-of-bounds read during context decoding
Check the remaining data length before accessing the context structure
to ensure that the entire structure is contained within the packet.
Additionally, since the context data length `ctxt_len` has already been
checked against the total packet length `len_of_ctxts`, update the
comparison to use `ctxt_len`.
Cc: [email protected]
Signed-off-by: Kuan-Ting Chen <[email protected]>
Acked-by: Namjae Jeon <[email protected]>
Signed-off-by: Steve French <[email protected]>
Diffstat (limited to 'lib/mpi/mpi-mod.c')
0 files changed, 0 insertions, 0 deletions